Backdoor.Win32.Delf.lq
(Backdoor.Win32.Delf.lq)

by ?

Original name unknown

Written in Delphi

more in this category


dropped files:
c:\WINDOWS\svchost30.exe
size: 541,696 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Svchost"
data: C:\WINDOWS\svchost30.exe 



tested on Windows XP
September 16, 2004

MegaSecurity